Live IOC Feed
103,926 recently reported malicious indicators from the last 7 days. Values are defanged — don't visit them.
| Indicator | Type | Malware / threat | First seen | Source |
|---|---|---|---|---|
| www[.]ambiopharmconsultingltdbackup1[.]com | domain | Remcos | ThreatFox | |
| worktoday[.]3utilities[.]com | domain | Remcos | ThreatFox | |
| www[.]osamaphplogisticesbackup2[.]com | domain | Remcos | ThreatFox | |
| www[.]osamaphplogistices[.]com | domain | Remcos | ThreatFox | |
| www[.]osamaphplogisticesbackup[.]com | domain | Remcos | ThreatFox | |
| www[.]osamaphplogisticesbackup1[.]com | domain | Remcos | ThreatFox | |
| magicalplanet[.]4nmn[.]com | domain | Remcos | ThreatFox | |
| www[.]godschild20onyimaxduckdnsbackup2[.]com | domain | Remcos | ThreatFox | |
| godschild20onyimax[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| www[.]godschild20onyimaxduckdnsbackup[.]com | domain | Remcos | ThreatFox | |
| www[.]godschild20onyimaxduckdnsbackup1[.]com | domain | Remcos | ThreatFox | |
| www[.]phongketaonduchuyclassproject1[.]com | domain | Remcos | ThreatFox | |
| www[.]phongketaonduchuyclassproject2[.]com | domain | Remcos | ThreatFox | |
| www[.]phongketaonduchuyclassproject3[.]com | domain | Remcos | ThreatFox | |
| gotomuhammed[.]hopto[.]org | domain | Remcos | ThreatFox | |
| gumduck2[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| rawegg123[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| gumduck[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| gumduck1[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| jaja00[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| 1remz[.]duckdns[.]org | domain | Remcos | ThreatFox | |
| www[.]valleyintmd[.]com | domain | Remcos | ThreatFox | |
| www[.]valleyintmdbackup[.]com | domain | Remcos | ThreatFox | |
| www[.]valleyintmdbackup1[.]com | domain | Remcos | ThreatFox | |
| www[.]valleyintmdbackup2[.]com | domain | Remcos | ThreatFox | |
| alpharecoveries001[.]duckdns[.]org | domain | Remcos | ThreatFox |